
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier: b5Z0ohI0jtweTmRxZn5eekmUUkAJA1G7sxwp1D+H9XI=
Subject key identifier: 95:9E:52:82:97:49:10:42:3F:01:49:D1:7E:DD:EC:F6:D0:AC:F3:64
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number: 02C2
Signing time: Fri 17 Apr 2026 01:20:57 +0000
Manifest this update: Fri 17 Apr 2026 01:20:57 +0000
Manifest next update: Fri 24 Apr 2026 01:20:57 +0000
Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: dZuAiOV1d+h13bKTV2kPZ9hhT5bLASgSx+f7Xy2cSVc=)
2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: WAW2CdRHZenQ2VR6CRuIZWRm9VyTgjzkK5cSEcBqoHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Validity
Not Before: Apr 17 01:20:57 2026 GMT
Not After : Apr 24 01:20:57 2026 GMT
Subject: CN=69e18af9-117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:40:44:1a:da:59:e5:9f:45:d3:d1:b4:e3:
a9:ff:2e:be:bb:05:b4:ac:92:d9:6e:bc:77:8f:ba:
aa:c2:51:f1:43:f2:bf:37:36:8b:64:c0:30:60:8b:
fa:9b:8b:8e:80:7a:e7:6d:b3:cb:ae:6b:85:3e:09:
7d:99:4e:51:74:4b:cb:a0:61:91:53:7f:10:0a:d6:
1e:36:b6:26:4f:f9:1b:91:33:57:5c:61:52:73:20:
bc:12:55:ad:17:17:c6:78:aa:63:e7:54:a6:0f:bc:
41:b9:65:fb:48:81:ce:99:85:47:5e:53:31:cf:de:
d7:f3:17:3e:06:4c:96:22:10:d2:20:b1:36:c1:5d:
97:fb:e6:f0:02:a3:13:4f:fb:aa:8e:8b:9c:ea:86:
26:87:f0:8b:a4:99:49:d4:44:da:46:b1:64:c9:07:
4d:b8:84:f2:3e:f8:6c:84:2a:d7:60:06:45:e2:9c:
67:49:44:35:82:cc:c2:3a:e8:9e:aa:e2:3f:c1:ab:
81:c0:27:e8:3c:ea:5a:0d:a6:be:2c:58:d1:a7:3a:
aa:d1:4e:ed:ef:e6:0b:27:d2:b7:56:68:d9:ee:8e:
35:c6:4e:df:f2:af:af:10:f5:5b:ab:27:e0:39:a4:
24:9d:41:60:11:d1:2e:4d:b7:fd:ba:e0:e4:a3:e1:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:52:82:97:49:10:42:3F:01:49:D1:7E:DD:EC:F6:D0:AC:F3:64
X509v3 Authority Key Identifier:
keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:db:8e:d4:bc:65:d2:24:92:a8:4f:d2:05:97:9d:2a:01:
04:74:13:e7:49:23:62:b5:81:73:d0:d4:8a:04:da:79:9a:04:
c6:ba:50:0c:00:1d:e8:88:b3:e8:a3:25:48:c4:df:8d:e6:82:
ea:9c:19:04:2a:26:bc:5f:f8:26:5f:cc:1f:59:17:44:49:b1:
04:0d:19:bd:58:9f:66:b6:35:59:71:b9:69:d3:2d:98:93:09:
60:fc:48:42:89:21:35:c8:da:e0:dc:b5:5e:ef:c8:49:a9:bc:
d0:d3:65:ad:b4:8a:27:dc:72:b1:7a:1e:50:ab:ee:0f:47:e9:
e7:a9:8d:ae:04:86:8c:b8:7c:4c:e4:9a:b1:12:4d:ef:e5:f3:
e1:36:ba:cd:b1:d6:7f:68:12:b6:e4:3d:49:7d:fe:48:44:47:
43:ef:20:7c:79:94:37:05:18:5b:63:96:00:18:2f:ea:6a:9e:
63:ff:0b:b6:7a:a0:5b:da:48:95:4f:f7:ba:1d:81:a5:3e:b0:
13:a4:c1:62:93:43:a5:68:6e:66:44:4a:84:33:ce:5e:8d:1e:
68:c9:a0:d4:93:71:e5:e8:5b:8c:21:0a:6e:b0:aa:6a:57:d4:
a9:37:b4:a5:83:bc:3a:bc:22:25:30:48:70:f3:a4:c4:2b:c2:
15:fc:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:13 2026 by rpki-client